CVE-2022-29526: Fedoraproject Fedora

Medium severity, CVSS 5.3. EPSS: 3% chance of exploitation in the next 30 days.

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.

Affected products

• Fedoraproject Fedora: version 35 only; version 36 only
• Golang Go: before 1.17.10 (fixed in 1.17.10); from 1.18.0, before 1.18.2 (fixed in 1.18.2)
• Netapp Beegfs Csi Driver: affected versions not specified

Published 2022-06-23. Last modified 2026-06-17.